*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
Use !analyze -v to get detailed debugging information.
BugCheck 1E, {ffffffffc0000005, fffff800030dd36c, fa80, 0}
Probably caused by : [COLOR="Red"]ntkrnlmp.exe[/COLOR] ( nt!KiSecondaryClockInterrupt+7c )
Followup: MachineOwner
---------
3: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
[COLOR="red"]KMODE_EXCEPTION_NOT_HANDLED (1e)[/COLOR]
This is a very common bugcheck. Usually the exception address pinpoints
the driver/function that caused the problem. Always note this address
as well as the link date of the driver/image that contains this address.
Arguments:
Arg1: ffffffffc0000005, The exception code that was not handled
Arg2: fffff800030dd36c, The address that the exception occurred at
Arg3: 000000000000fa80, Parameter 0 of the exception
Arg4: 0000000000000000, Parameter 1 of the exception
Debugging Details:
------------------
EXCEPTION_CODE: ([COLOR="red"]NTSTATUS[/COLOR]) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.
FAULTING_IP:
nt!KiSecondaryClockInterrupt+7c
fffff800`030dd36c 0f296530 movaps xmmword ptr [rbp+30h],xmm4
EXCEPTION_PARAMETER1: 000000000000fa80
EXCEPTION_PARAMETER2: 0000000000000000
WRITE_ADDRESS: GetPointerFromAddress: unable to read from fffff800033080e0
0000000000000000
ERROR_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.
BUGCHECK_STR: 0x1E_c0000005
CUSTOMER_CRASH_COUNT: 1
DEFAULT_BUCKET_ID: VISTA_DRIVER_FAULT
PROCESS_NAME: [COLOR="red"]SimCity.exe[/COLOR]
CURRENT_IRQL: 0
EXCEPTION_RECORD: fffff88007e849e8 -- (.exr 0xfffff88007e849e8)
ExceptionAddress: fffff800030dd36c (nt!KiSecondaryClockInterrupt+0x000000000000007c)
ExceptionCode: c0000005 (Access violation)
ExceptionFlags: 00000000
NumberParameters: 2
Parameter[0]: 000000000000fa80
Parameter[1]: 0000000000000000
Attempt to execute non-executable address 0000000000000000
TRAP_FRAME: fffff88007e84a90 -- (.trap 0xfffff88007e84a90)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=0000000000000000 rbx=0000000000000000 rcx=0000000000000004
rdx=0000000000000000 rsi=0000000000000000 rdi=0000000000000000
rip=fffff800030dd36c rsp=fffff88007e84c20 rbp=fffff88007e84ca0
r8=000000000000002b r9=000000007705f969 r10=fffffa800531fb60
r11=0000000000000246 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0 nv up di pl zr na po nc
nt!KiSecondaryClockInterrupt+0x7c:
fffff800`030dd36c 0f296530 movaps xmmword ptr [rbp+30h],xmm4 ss:fffff880`07e84cd0=00000000000000000000000000000000
Resetting default scope
LAST_CONTROL_TRANSFER: from fffff8000310a579 to fffff800030d0840
STACK_TEXT:
fffff880`07e84218 fffff800`0310a579 : 00000000`0000001e ffffffff`c0000005 fffff800`030dd36c 00000000`0000fa80 : nt!KeBugCheckEx
fffff880`07e84220 fffff800`030cfe82 : fffff880`07e849e8 00000000`2db3b060 fffff880`07e84a90 00000000`00000001 : nt!KiDispatchException+0x1b9
fffff880`07e848b0 fffff800`030ce78a : 00000000`00000000 fffff800`0301fb7f 00000000`00000001 00000000`00000000 : nt!KiExceptionDispatch+0xc2
fffff880`07e84a90 fffff800`030dd36c : fffffa80`0531fb60 00000000`0000072c 00000000`00000000 fffffa80`040913d0 : nt!KiGeneralProtectionFault+0x10a
fffff880`07e84c20 00000000`73651d5f : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSecondaryClockInterrupt+0x7c
00000000`05b0fd94 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x73651d5f
STACK_COMMAND: kb
FOLLOWUP_IP:
nt!KiSecondaryClockInterrupt+7c
fffff800`030dd36c 0f296530 movaps xmmword ptr [rbp+30h],xmm4
SYMBOL_STACK_INDEX: 4
SYMBOL_NAME: nt!KiSecondaryClockInterrupt+7c
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: nt
IMAGE_NAME: ntkrnlmp.exe
DEBUG_FLR_IMAGE_TIMESTAMP: 50e79b73
FAILURE_BUCKET_ID: X64_0x1E_c0000005_nt!KiSecondaryClockInterrupt+7c
BUCKET_ID: X64_0x1E_c0000005_nt!KiSecondaryClockInterrupt+7c
Followup: MachineOwner
---------